|
|
You're in the
iis security
group:problem with SSL certificate
iis security:
You can download following tool and run it on the webserver to verify certificate is good and there is private key associated with that certificate. http://www.microsoft.com/downloads/details.aspx?FamilyID=cabea1d0-5a10-41bc-83d4-06c814265282&DisplayLang=en Look for server side errors. HTH. -- Ganesh Anekar Microsoft Developer Support Internet Information Server ********************************************************************* [quoted text, click to view] >>Please do not send email directly to this alias. This is an online account name for newsgroup participation only.<<This posting is provided "AS IS" with no warranties, and confers no rights. You assume all risk for your use. © 2004 Microsoft Corporation. All rights reserved. ********************************************************************* [quoted text, click to view] "Vassilis" <vcon@hate_spam_hol.gr> wrote in message news:%23mse3zbvEHA.2116@TK2MSFTNGP14.phx.gbl... > w2k3, exchange2k3 sp1 > > So far i was using a certificate with wrong common name from an other > authority. OWA SSL was working fine but in order for RPC to work i needed > a > certificate with the same common name as the DNS name. So from another > win2k3 server with a certification authority installed i issued a > certificate for my server. > > Now, the certificate is correctly installed BUT it takes ages to load the > page with https. If i go to my server on IIS and on directory security and > click on view certificate the server hangs for a while and then it > displays > the certificate with an explamation icon saying "do not have enough > information for the certificate" or something like that. > > The same thing happens to the client. from IE we type the address it takes > ages to display the security notification dialog, we click on view > certificate, again the computer hangs and then after a while it displays > the > certificate and even though we install it to the client we still get the > security windows among others. > > Any ideas about this ? > > thank you > > > >
w2k3, exchange2k3 sp1
So far i was using a certificate with wrong common name from an other authority. OWA SSL was working fine but in order for RPC to work i needed a certificate with the same common name as the DNS name. So from another win2k3 server with a certification authority installed i issued a certificate for my server. Now, the certificate is correctly installed BUT it takes ages to load the page with https. If i go to my server on IIS and on directory security and click on view certificate the server hangs for a while and then it displays the certificate with an explamation icon saying "do not have enough information for the certificate" or something like that. The same thing happens to the client. from IE we type the address it takes ages to display the security notification dialog, we click on view certificate, again the computer hangs and then after a while it displays the certificate and even though we install it to the client we still get the security windows among others. Any ideas about this ? thank you
done that but i don't receive any error during the test.
i try to install the certificate ton the trusted root CA of the server but even though it says import succesfully the certificate i do not see it on the store. Is their any way to make the server trust the CA ? i think thats the problem tnx [quoted text, click to view] "Ganesh Anekar [MSFT]" <Ganesh@online.microsoft.com> wrote in message news:OQsLBygvEHA.2316@TK2MSFTNGP15.phx.gbl... > Hi, > > You can download following tool and run it on the webserver to verify > certificate is good and there is private key associated with that > certificate. > > http://www.microsoft.com/downloads/details.aspx?FamilyID=cabea1d0-5a10-41bc-83d4-06c814265282&DisplayLang=en > > Look for server side errors. > > HTH. > -- > Ganesh Anekar > Microsoft Developer Support > Internet Information Server > ********************************************************************* > >>Please do not send email directly to this alias. This is an online > account name for newsgroup participation only.<< > > This posting is provided "AS IS" with no warranties, and confers no rights. > You assume all risk for your use. > > © 2004 Microsoft Corporation. All rights reserved. > ********************************************************************* > "Vassilis" <vcon@hate_spam_hol.gr> wrote in message > news:%23mse3zbvEHA.2116@TK2MSFTNGP14.phx.gbl... > > w2k3, exchange2k3 sp1 > > > > So far i was using a certificate with wrong common name from an other > > authority. OWA SSL was working fine but in order for RPC to work i needed > > a > > certificate with the same common name as the DNS name. So from another > > win2k3 server with a certification authority installed i issued a > > certificate for my server. > > > > Now, the certificate is correctly installed BUT it takes ages to load the > > page with https. If i go to my server on IIS and on directory security and > > click on view certificate the server hangs for a while and then it > > displays > > the certificate with an explamation icon saying "do not have enough > > information for the certificate" or something like that. > > > > The same thing happens to the client. from IE we type the address it takes > > ages to display the security notification dialog, we click on view > > certificate, again the computer hangs and then after a while it displays > > the > > certificate and even though we install it to the client we still get the > > security windows among others. > > > > Any ideas about this ? > > > > thank you > > > > > > > > > >
Hi Vassilis,
If you have standalone setup of your CA you can manually import the CA certificate. Open Web Interface for your CA server and go to Download a CA certificate, certificate chain or CRL. Here click on Download CA certificate. Save the file and transfer it on the client (all your clients and servers that will work with your Exchange server). Double click on it and follow the wizard. Default values should be OK. Once you install it, all the certificates issued on this CA will be trusted. I hope this helps, Mike [quoted text, click to view] "Vassilis" <vcon@hate_spam_hol.gr> wrote in message news:%23QFocAovEHA.1292@TK2MSFTNGP10.phx.gbl... > done that but i don't receive any error during the test. > > i try to install the certificate ton the trusted root CA of the server but > even though it says import succesfully the certificate i do not see it on > the store. Is their any way to make the server trust the CA ? > i think thats the problem > > tnx > > "Ganesh Anekar [MSFT]" <Ganesh@online.microsoft.com> wrote in message > news:OQsLBygvEHA.2316@TK2MSFTNGP15.phx.gbl... >> Hi, >> >> You can download following tool and run it on the webserver to verify >> certificate is good and there is private key associated with that >> certificate. >> >> > http://www.microsoft.com/downloads/details.aspx?FamilyID=cabea1d0-5a10-41bc-83d4-06c814265282&DisplayLang=en >> >> Look for server side errors. >> >> HTH. >> -- >> Ganesh Anekar >> Microsoft Developer Support >> Internet Information Server >> ********************************************************************* >> >>Please do not send email directly to this alias. This is an online >> account name for newsgroup participation only.<< >> >> This posting is provided "AS IS" with no warranties, and confers no > rights. >> You assume all risk for your use. >> >> © 2004 Microsoft Corporation. All rights reserved. >> ********************************************************************* >> "Vassilis" <vcon@hate_spam_hol.gr> wrote in message >> news:%23mse3zbvEHA.2116@TK2MSFTNGP14.phx.gbl... >> > w2k3, exchange2k3 sp1 >> > >> > So far i was using a certificate with wrong common name from an other >> > authority. OWA SSL was working fine but in order for RPC to work i > needed >> > a >> > certificate with the same common name as the DNS name. So from another >> > win2k3 server with a certification authority installed i issued a >> > certificate for my server. >> > >> > Now, the certificate is correctly installed BUT it takes ages to load > the >> > page with https. If i go to my server on IIS and on directory security > and >> > click on view certificate the server hangs for a while and then it >> > displays >> > the certificate with an explamation icon saying "do not have enough >> > information for the certificate" or something like that. >> > >> > The same thing happens to the client. from IE we type the address it > takes >> > ages to display the security notification dialog, we click on view >> > certificate, again the computer hangs and then after a while it >> > displays >> > the >> > certificate and even though we install it to the client we still get >> > the >> > security windows among others. >> > >> > Any ideas about this ? >> > >> > thank you >> > >> > >> > >> > >> >> > >
it works!
thanks! [quoted text, click to view] "Miha Pihler" <mihap-news@atlantis.si> wrote in message news:e3CYfOsvEHA.3228@TK2MSFTNGP12.phx.gbl... > Hi Vassilis, > > If you have standalone setup of your CA you can manually import the CA > certificate. > > Open Web Interface for your CA server and go to Download a CA certificate, > certificate chain or CRL. Here click on Download CA certificate. Save the > file and transfer it on the client (all your clients and servers that will > work with your Exchange server). Double click on it and follow the wizard. > Default values should be OK. Once you install it, all the certificates > issued on this CA will be trusted. > > I hope this helps, > > Mike > > "Vassilis" <vcon@hate_spam_hol.gr> wrote in message > news:%23QFocAovEHA.1292@TK2MSFTNGP10.phx.gbl... > > done that but i don't receive any error during the test. > > > > i try to install the certificate ton the trusted root CA of the server but > > even though it says import succesfully the certificate i do not see it on > > the store. Is their any way to make the server trust the CA ? > > i think thats the problem > > > > tnx > > > > "Ganesh Anekar [MSFT]" <Ganesh@online.microsoft.com> wrote in message > > news:OQsLBygvEHA.2316@TK2MSFTNGP15.phx.gbl... > >> Hi, > >> > >> You can download following tool and run it on the webserver to verify > >> certificate is good and there is private key associated with that > >> certificate. > >> > >> > > http://www.microsoft.com/downloads/details.aspx?FamilyID=cabea1d0-5a10-41bc-83d4-06c814265282&DisplayLang=en > >> > >> Look for server side errors. > >> > >> HTH. > >> -- > >> Ganesh Anekar > >> Microsoft Developer Support > >> Internet Information Server > >> ********************************************************************* > >> >>Please do not send email directly to this alias. This is an online > >> account name for newsgroup participation only.<< > >> > >> This posting is provided "AS IS" with no warranties, and confers no > > rights. > >> You assume all risk for your use. > >> > >> © 2004 Microsoft Corporation. All rights reserved. > >> ********************************************************************* > >> "Vassilis" <vcon@hate_spam_hol.gr> wrote in message > >> news:%23mse3zbvEHA.2116@TK2MSFTNGP14.phx.gbl... > >> > w2k3, exchange2k3 sp1 > >> > > >> > So far i was using a certificate with wrong common name from an other > >> > authority. OWA SSL was working fine but in order for RPC to work i > > needed > >> > a > >> > certificate with the same common name as the DNS name. So from another > >> > win2k3 server with a certification authority installed i issued a > >> > certificate for my server. > >> > > >> > Now, the certificate is correctly installed BUT it takes ages to load > > the > >> > page with https. If i go to my server on IIS and on directory security > > and > >> > click on view certificate the server hangs for a while and then it > >> > displays > >> > the certificate with an explamation icon saying "do not have enough > >> > information for the certificate" or something like that. > >> > > >> > The same thing happens to the client. from IE we type the address it > > takes > >> > ages to display the security notification dialog, we click on view > >> > certificate, again the computer hangs and then after a while it > >> > displays > >> > the > >> > certificate and even though we install it to the client we still get > >> > the > >> > security windows among others. > >> > > >> > Any ideas about this ? > >> > > >> > thank you > >> > > >> > > >> > > >> > > >> > >> > > > > > >
Don't see what you're looking for? Try a search.
|
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
| home · blog · groups | Questions? Comments? Contact the dn |